Governance, Risk, and Compliance (GRC) Manager

DXC Technology•Charleston, SC

About The Position

DXC Technology is seeking an experienced Governance, Risk, and Compliance (GRC) Manager to lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments. The role develops and maintains security policies, oversees risk assessment and mitigation, coordinates compliance initiatives, and ensures security controls align with applicable regulatory requirements, industry standards, and business objectives. The position collaborates with cybersecurity, engineering, infrastructure, development, and business teams to identify and manage risks, strengthen controls, support audits, and continuously improve the organization’s security and compliance posture. It also oversees third-party risk management, business continuity and disaster recovery governance, risk reporting, and personnel assigned to the GRC function. The ideal candidate has a strong cybersecurity, risk management, and policy compliance or audit background in the financial services sector, and understands regulatory environments, security control frameworks, enterprise risk management, and effective governance and audit processes. Insurance industry experience and familiarity with a specific organization’s internal policies, tools, or compliance processes are not required. DXC’s work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. The company is committed to fostering an inclusive environment.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
At least 7 years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field.
At least 3 years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities.
Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector.
Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices.
Experience developing, implementing, reviewing, or assessing security policies, standards, procedures, and internal controls.
Experience conducting risk assessments, documenting findings, evaluating control effectiveness, and managing remediation activities.
Experience supporting internal or external audits, compliance reviews, control assessments, or regulatory examinations.
Understanding of technology and cybersecurity risks associated with applications, cloud platforms, infrastructure, data protection, and software development.
Experience preparing risk reports, maintaining risk registers, documenting compliance findings, and communicating remediation status to stakeholders.
Strong analytical, organizational, problem-solving, and communication skills.
Ability to explain technical security risks and compliance requirements to technical teams and business stakeholders.
Demonstrated ability to coordinate cross-functional activities, manage competing priorities, and drive risk remediation to completion.
Experience collaborating with stakeholders across cybersecurity, technology, risk, compliance, audit, and business functions.

Nice To Haves

Professional certifications such as CISA, CISM, CRISC, CISSP, or CGRC.
Experience with recognized cybersecurity and risk management frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, or COBIT.
Experience with GRC platforms or tools for managing risks, controls, audit findings, and remediation activities.
Experience assessing cybersecurity risks in cloud environments, SaaS platforms, enterprise applications, or complex IT infrastructures.
Experience managing third-party risk assessments, vendor security reviews, or technology supply chain risks.
Experience supporting business continuity, disaster recovery, or operational resilience programs.
Experience developing risk dashboards, compliance metrics, and executive reporting.
Experience supporting regulatory compliance or audit programs in highly regulated industries.
Advanced degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related discipline.
Experience leading, mentoring, or supervising GRC, cybersecurity, risk, or compliance professionals.

Responsibilities

Develop, maintain, and oversee cybersecurity policies, standards, and procedures supporting regulatory compliance, security governance, and organizational risk management.
Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations; identify, evaluate, prioritize, and mitigate cybersecurity and operational risks.
Manage policy compliance and audit readiness, including evidence collection, control assessments, internal and external audits, customer security assessments, and regulatory examinations.
Evaluate cybersecurity control effectiveness and work with technical and business teams to address control gaps, policy exceptions, and compliance deficiencies.
Partner with cybersecurity, engineering, infrastructure, and development teams to ensure controls are implemented, documented, and auditable throughout the software development lifecycle and across technology environments.
Oversee third-party risk management, including vendor security assessments, security requirement reviews, supply chain risk identification, and ongoing monitoring of critical technology providers.
Establish and maintain processes for tracking risk remediation, compliance findings, control deficiencies, policy exceptions, and formal risk acceptance.
Support governance forums, risk committees, and architecture review meetings in evaluating new technologies, system integrations, and significant technology changes from a security and risk perspective.
Oversee business continuity and disaster recovery governance, including testing, tabletop exercises, documentation, and remediation of identified gaps.
Prepare and present risk and compliance reports for executive leadership and business stakeholders, covering risk indicators, audit status, remediation progress, policy compliance, and overall cybersecurity posture.
Monitor emerging cybersecurity threats, regulatory developments, and industry standards, assessing their potential impact on policies, controls, and risk management practices.
Identify opportunities to improve security governance, streamline compliance activities, strengthen internal controls, and enhance risk management processes.
Collaborate with stakeholders to establish accountability and timelines for resolving identified risks and compliance issues.
Supervise, develop, and lead GRC personnel by establishing priorities, performance expectations, and professional development opportunities.